Route Origin Authorization

$ rpki-client -vvf rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313732353a3a2f38302d3830203d3e20333939353338.roa
File:                     323630363a336563303a323032323a3231323a313732353a3a2f38302d3830203d3e20333939353338.roa (raw, json)
Hash identifier:          7HsHgXRNHg1uhErwPRApGnbeQda8u4gRiV2lfjTC1o4=
Subject key identifier:   61:94:BD:23:74:87:57:B7:63:59:21:20:B6:B7:E9:6D:42:F9:F7:5F
Certificate issuer:       /CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
Certificate serial:       3F97078C07DA7134CEC1CC5DA557B11E72F069B0
Authority key identifier: 74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer
Subject info access:      rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313732353a3a2f38302d3830203d3e20333939353338.roa
Signing time:             Sat 12 Feb 2022 17:25:01 +0000
ROA not before:           Sat 12 Feb 2022 17:20:01 +0000
ROA not after:            Sat 11 Feb 2023 17:25:01 +0000
asID:                     399538
IP address blocks:        2606:3ec0:2022:212:1725::/80 maxlen: 80

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:97:07:8c:07:da:71:34:ce:c1:cc:5d:a5:57:b1:1e:72:f0:69:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922
        Validity
            Not Before: Feb 12 17:20:01 2022 GMT
            Not After : Feb 11 17:25:01 2023 GMT
        Subject: CN=3082010A0282010100AFCB2E8E22E3499BA35C6833E442CC9274DF1E82F31BC1A29E061FB856BB8446529045348C71BB169A90E9CC22864363D42E96495ACCDAF9695455B019B3E0B6D78912E0CA5FCB0BC61B3F68DA6CACEA5AA3A7514543629823DA45D1CF239AB6BD6E57DD59595EF8851727D7A9AB8DF93D09F700CB5E3D2D002AC2D0FC6A939D0D2572025EEC0B07D7D0B5D44D0D14DB36FFB30426C1917CE05CC724EB0DE7A635758CEEC505B8BBD92DE8963A3E9AB9352B70B0A2087A84FC03153F114C3350142392D6E6D59B10E0237B9368BA539157DF574B4215C11E53E0DA3C0592E599D0A60CD61D58836389D3D4DEC53B783293ECBB7661365A6437969B2FB18C61B70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cb:2e:8e:22:e3:49:9b:a3:5c:68:33:e4:42:
                    cc:92:74:df:1e:82:f3:1b:c1:a2:9e:06:1f:b8:56:
                    bb:84:46:52:90:45:34:8c:71:bb:16:9a:90:e9:cc:
                    22:86:43:63:d4:2e:96:49:5a:cc:da:f9:69:54:55:
                    b0:19:b3:e0:b6:d7:89:12:e0:ca:5f:cb:0b:c6:1b:
                    3f:68:da:6c:ac:ea:5a:a3:a7:51:45:43:62:98:23:
                    da:45:d1:cf:23:9a:b6:bd:6e:57:dd:59:59:5e:f8:
                    85:17:27:d7:a9:ab:8d:f9:3d:09:f7:00:cb:5e:3d:
                    2d:00:2a:c2:d0:fc:6a:93:9d:0d:25:72:02:5e:ec:
                    0b:07:d7:d0:b5:d4:4d:0d:14:db:36:ff:b3:04:26:
                    c1:91:7c:e0:5c:c7:24:eb:0d:e7:a6:35:75:8c:ee:
                    c5:05:b8:bb:d9:2d:e8:96:3a:3e:9a:b9:35:2b:70:
                    b0:a2:08:7a:84:fc:03:15:3f:11:4c:33:50:14:23:
                    92:d6:e6:d5:9b:10:e0:23:7b:93:68:ba:53:91:57:
                    df:57:4b:42:15:c1:1e:53:e0:da:3c:05:92:e5:99:
                    d0:a6:0c:d6:1d:58:83:63:89:d3:d4:de:c5:3b:78:
                    32:93:ec:bb:76:61:36:5a:64:37:96:9b:2f:b1:8c:
                    61:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:94:BD:23:74:87:57:B7:63:59:21:20:B6:B7:E9:6D:42:F9:F7:5F
            X509v3 Authority Key Identifier:
                keyid:74:A1:FB:7B:A6:F0:0D:24:EC:77:C0:0B:E9:40:9F:A8:75:1F:FE:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/74A1FB7BA6F00D24EC77C00BE9409FA8751FFE3C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/68f2b65f-cc48-4916-b9cc-cae90b49da7b/5a7b5d32e3fb537c416be83f7f6cbb4a95e958a61b25017922.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.dataplane.org/repo/DATAPLANE/0/323630363a336563303a323032323a3231323a313732353a3a2f38302d3830203d3e20333939353338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2606:3ec0:2022:212:1725::/80

    Signature Algorithm: sha256WithRSAEncryption
         4c:7f:6d:81:65:92:53:ff:2c:e4:8b:09:d2:67:21:6e:8a:f3:
         d6:09:57:7d:2d:7f:d7:e6:af:92:ea:92:6c:0f:43:b0:06:b9:
         e1:68:6e:63:ca:04:fa:78:9d:1d:3c:8a:b5:b8:bd:aa:ec:db:
         c1:45:cd:1a:65:03:03:2f:d9:71:ad:e4:ef:83:17:fb:bd:54:
         c4:a7:43:b8:51:93:73:20:38:7e:9d:7c:5a:41:49:b3:58:f2:
         a4:8c:ff:98:28:47:29:7a:f0:f0:75:1d:39:d4:53:5e:47:b5:
         9b:92:49:1c:3c:09:4e:f1:81:9c:37:c3:02:8f:42:f9:c3:24:
         70:e3:7c:df:8a:0c:3a:a6:8e:c8:c5:55:74:98:0e:79:3d:25:
         0b:2c:9a:11:d1:77:08:63:a3:f8:1d:ca:d2:8a:38:bc:f2:ca:
         c3:de:c3:25:06:15:ef:b9:85:19:a1:11:69:ab:57:10:7e:56:
         e7:a7:99:14:01:87:d8:7c:81:a9:1e:37:6e:14:7d:c4:b3:ff:
         d7:df:ea:d2:d6:3a:d9:4a:fc:b7:89:6d:39:e9:8b:f3:12:e0:
         62:20:df:45:73:f0:db:7d:8c:6c:5f:48:3f:0d:ae:ed:3f:87:
         dd:8d:5d:f0:7b:1f:78:2a:ae:4b:0f:a7:8e:46:5e:e9:e0:73:
         73:28:70:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----